Skip to content

Spam Package "Attack" on NPM

npmjs.com
2 pointslenovouser1 comment
On HN

Comments

This account is creating weird spam packages on npm. I can't figure out the reason for it, but it seems fairly elaborate. A lot of the packages depend on each other and the packages get updated over months with bullshit commits like here: https://github.com/erboladaiorg/et-itaque/commits/main/

Not sure what to make of it, I first thought it might be related to the Tea project which previously had the creation of spam packages associated with it, but I haven't found any reference to that in the package sources I looked at.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.